Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/atTHoOzp-N_NTS5EuAbSHcdSIgU.roa
File: atTHoOzp-N_NTS5EuAbSHcdSIgU.roa (raw, json)
Hash identifier: z1LK3sFtT6laMRog5qDK55spPfEZPLqyV00LHmlzTC0=
Subject key identifier: 6A:D4:C7:A0:EC:E9:F8:DF:CD:4D:2E:44:B8:06:D2:1D:C7:52:22:05
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 018976E72359ADC0EA22082B55A8B542482A
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/atTHoOzp-N_NTS5EuAbSHcdSIgU.roa
Signing time: Fri 21 Jul 2023 05:23:26 +0000
ROA not before: Fri 21 Jul 2023 05:23:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 45.141.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:76:e7:23:59:ad:c0:ea:22:08:2b:55:a8:b5:42:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jul 21 05:23:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad4c7a0ece9f8dfcd4d2e44b806d21dc7522205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ec:1e:c5:01:59:51:bc:f7:68:ee:9d:3a:91:
df:d1:e2:80:33:12:cd:91:51:f4:8f:25:af:65:ef:
57:03:e0:ca:95:47:80:3f:9a:f9:9e:19:06:fe:3f:
3e:e2:91:8e:0d:bb:c0:82:71:1a:34:ab:de:9b:1f:
59:21:2f:09:93:8c:c9:1f:9d:b7:ec:ad:5b:7e:4b:
06:d6:ef:fb:7d:69:5f:5b:4a:8c:07:fe:0b:c5:a1:
18:a5:97:4d:6c:06:3a:23:0c:87:2d:c6:00:3c:49:
17:5c:40:d9:2d:95:e9:07:fa:e2:71:5a:22:ee:c9:
90:28:37:e1:a2:9b:57:04:76:38:a4:08:f7:f5:c2:
5c:7e:44:4a:ac:d6:2a:ae:6f:ec:df:2b:69:35:fd:
aa:8d:80:20:f6:22:b0:1e:a5:18:57:82:7d:22:02:
0a:c1:d8:db:e3:0f:9b:71:c7:32:b9:92:51:87:45:
ba:e7:1e:e0:df:4d:69:4b:b6:35:01:d4:f9:04:8e:
c6:35:03:8c:23:06:38:be:f1:af:13:e7:c6:23:7e:
58:33:50:01:2e:95:f8:1e:52:f9:13:9c:22:f8:6b:
ae:c3:d2:28:d5:54:52:00:89:1e:ae:d9:4d:b5:05:
94:c4:ee:6c:a4:bb:a3:64:15:93:01:e0:5c:88:58:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D4:C7:A0:EC:E9:F8:DF:CD:4D:2E:44:B8:06:D2:1D:C7:52:22:05
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/atTHoOzp-N_NTS5EuAbSHcdSIgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2e:20:10:ef:38:df:3c:8c:d3:82:ff:80:28:38:92:3d:4d:
1d:5c:ab:fc:34:c6:1f:29:68:65:3f:88:06:e3:b8:31:ba:2d:
57:7e:9a:67:a3:9a:ca:1a:a9:37:b9:cf:1f:fd:d1:c1:d9:b0:
d4:9e:dc:18:66:d3:38:dc:77:e7:18:90:bb:8b:4d:17:3c:03:
8a:70:32:65:5b:c8:a9:cc:a0:03:76:24:d5:5f:6e:5e:d5:f1:
5e:43:61:3d:2a:84:22:e6:6f:c4:08:f1:ef:21:59:f7:0d:e6:
49:5f:99:44:31:be:4f:0f:12:59:6c:c9:be:0e:ce:f2:e0:22:
e6:d4:31:00:4d:26:55:af:de:c3:72:a9:a5:9e:13:16:f8:59:
f9:f7:d9:95:80:d8:83:eb:a5:87:47:27:2f:4d:d0:04:6c:4a:
5f:fa:6f:3c:83:6b:59:7a:a2:8f:85:62:33:bf:2c:cc:8b:20:
6f:5e:c5:c7:f5:1b:d1:49:15:48:b8:52:f1:18:a5:85:ed:f3:
c0:47:17:14:4d:d5:a5:61:02:2e:f6:47:91:3f:fd:7d:93:98:
49:94:85:70:3a:e0:6a:d2:54:cb:de:dc:7c:82:b6:b2:db:f9:
93:24:39:aa:1f:8d:bd:43:bd:d6:05:45:2d:df:e7:25:c8:c9:
d9:d9:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:22 2024 by rpki-client on console-fra.rpki-client.org